Cyber Resilience

CVE-2025-23363

Open Redirect in Siemens Teamcenter 14.3 – 14.3.0.14

Published
11 February 2025
Modified
24 September 2025
Patch / advisory
CVSS Score v4 6.1
Click a component to see what it means
Raw vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0054 43th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2025-23363 is a medium-severity Open Redirect (CWE-601) vulnerability in Siemens Teamcenter. Its CVSS base score is 6.1 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Phishing (T1566); ranked at the 43th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to SI-10 (Information Input Validation) and AC-4 (Information Flow Enforcement) — see the control section below for these in your framework.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2025-23363 is an open redirect vulnerability (CWE-601) in the SSO login service of Siemens Teamcenter, affecting all versions of V14.1 and V14.2, versions of V14.3 prior to V14.3.0.14, versions of V2312 prior to V2312.0010, versions of V2406 prior to V2406.0008, and versions of V2412 prior to V2412.0004. The service accepts user-controlled input that can specify a link to an external site, enabling redirection of legitimate users to attacker-chosen URLs during authentication flows.

Attackers with network access can exploit this vulnerability without privileges by crafting a malicious link that a legitimate user must actively click (UI:R). Upon interaction, the victim is redirected to an attacker-controlled site, where valid session data can be stolen, leading to potential session hijacking. The vulnerability has a CVSS v3.1 base score of 7.4 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N), reflecting high confidentiality impact due to the changed scope.

Siemens has published security advisory SSA-656895 at https://cert-portal.siemens.com/productcert/html/ssa-656895.html, which documents the vulnerability and specifies patching to the listed fixed versions as the primary mitigation.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability Data

A vulnerability has been identified in Teamcenter V14.1 (All versions), Teamcenter V14.2 (All versions), Teamcenter V14.3 (All versions < V14.3.0.14), Teamcenter V2312 (All versions < V2312.0010), Teamcenter V2406 (All versions < V2406.0008), Teamcenter V2412 (All versions < V2412.0004). The SSO…

more

login service of affected applications accepts user-controlled input that could specify a link to an external site. This could allow an attacker to redirect the legitimate user to an attacker-chosen URL to steal valid session data. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise Techniques

T1566 Phishing Initial Access
Adversaries may send phishing messages to gain access to victim systems.
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2026-33862Same product: Siemens Teamcenter
CVE-2026-33893Same product: Siemens Teamcenter
CVE-2023-46750Shared CWE-601
CVE-2024-24764Shared CWE-601
CVE-2026-32113Shared CWE-601
CVE-2025-64250Shared CWE-601
CVE-2023-33405Shared CWE-601
CVE-2026-45566Shared CWE-601
CVE-2025-61587Shared CWE-601
CVE-2025-9084Shared CWE-601

Affected Assets

siemens
teamcenter
14.1, 14.2 · 14.3 — 14.3.0.14 · 2312.0 — 2312.0010 · 2406.0 — 2406.0008

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)
  • V3.7.2

Mitigating Controls (NIST 800-53 r5) AI

Input validation directly checks and rejects untrusted redirect targets before they are used in a response.

Information flow enforcement can restrict redirects to only approved/trusted destinations, stopping untrusted user-supplied URLs from being followed.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly require input validation and untrusted-redirect controls that prevent CWE-601.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

mitigates

Preventing access to attacker-controlled or malicious sites stops users from being redirected to untrusted locations via open-redirect or phishing links.

References